agentspend 0.1.7 → 0.1.9

package/dist/commands/card.js

@@ -12,6 +12,7 @@ const CARD_FILE = (0, node_path_1.join)(CONFIG_DIR, "card.json");
 const API_BASE = process.env.AGENTSPEND_API_URL ?? "https://api.agentspend.co";
 async function ensureConfigDir() {
     await (0, promises_1.mkdir)(CONFIG_DIR, { recursive: true });
+    await (0, promises_1.chmod)(CONFIG_DIR, 0o700);
 }
 function openUrl(url) {
     const cmd = node_process_1.platform === "darwin" ? "open" : node_process_1.platform === "win32" ? "start" : "xdg-open";
@@ -162,6 +163,7 @@ function registerCardCommands(program) {
             openUrl(result.setup_url);
             await ensureConfigDir();
             await (0, promises_1.writeFile)(SETUP_FILE, JSON.stringify({ setup_id: result.setup_id }, null, 2));
+            await (0, promises_1.chmod)(SETUP_FILE, 0o600);
             console.log("Waiting for setup to complete...");
             while (true) {
                 await sleep(3000);
@@ -173,6 +175,7 @@ function registerCardCommands(program) {
                             card_id: status.card_id,
                             card_secret: status.card_secret,
                         }, null, 2));
+                        await (0, promises_1.chmod)(CARD_FILE, 0o600);
                         console.log(`Card ID saved to ${CARD_FILE}`);
                     }
                     // Clean up setup file

package/dist/commands/wallet.js

@@ -8,6 +8,7 @@ const CONFIG_DIR = (0, node_path_1.join)((0, node_os_1.homedir)(), ".agentspend"
 const WALLET_FILE = (0, node_path_1.join)(CONFIG_DIR, "wallet.json");
 async function ensureConfigDir() {
     await (0, promises_1.mkdir)(CONFIG_DIR, { recursive: true });
+    await (0, promises_1.chmod)(CONFIG_DIR, 0o700);
 }
 async function readWalletConfig() {
     try {
@@ -49,7 +50,9 @@ function registerWalletCommands(program) {
                 private_key: privateKey,
             };
             await (0, promises_1.writeFile)(WALLET_FILE, JSON.stringify(config, null, 2));
+            await (0, promises_1.chmod)(WALLET_FILE, 0o600);
             console.log(`Wallet created. Address: ${account.address} — Fund it with USDC on Base.`);
+            console.log(`Private key saved to ${WALLET_FILE} (owner-only permissions). Keep this file secure.`);
         }
         catch (err) {
             console.error(`Error: ${err instanceof Error ? err.message : err}`);

package/package.json

@@ -1,11 +1,16 @@
 {
   "name": "agentspend",
-  "version": "0.1.7",
+  "version": "0.1.9",
   "description": "CLI for AgentSpend — manage cards and crypto wallets for AI agent payments",
+  "homepage": "https://github.com/jpbonch/agentspend",
+  "license": "MIT",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/jpbonch/agentspend.git"
   },
+  "engines": {
+    "node": ">=18"
+  },
   "bin": {
     "agentspend": "dist/index.js"
   },

package/src/commands/card.ts

@@ -1,5 +1,5 @@
 import { Command } from "commander";
-import { readFile, writeFile, mkdir, unlink } from "node:fs/promises";
+import { readFile, writeFile, mkdir, unlink, chmod } from "node:fs/promises";
 import { homedir } from "node:os";
 import { join } from "node:path";
 import { exec } from "node:child_process";
@@ -42,6 +42,7 @@ const API_BASE = process.env.AGENTSPEND_API_URL ?? "https://api.agentspend.co";
 
 async function ensureConfigDir(): Promise<void> {
   await mkdir(CONFIG_DIR, { recursive: true });
+  await chmod(CONFIG_DIR, 0o700);
 }
 
 function openUrl(url: string): void {
@@ -214,6 +215,7 @@ export function registerCardCommands(program: Command): void {
 
         await ensureConfigDir();
         await writeFile(SETUP_FILE, JSON.stringify({ setup_id: result.setup_id }, null, 2));
+        await chmod(SETUP_FILE, 0o600);
 
         console.log("Waiting for setup to complete...");
         while (true) {
@@ -227,6 +229,7 @@ export function registerCardCommands(program: Command): void {
                 card_id: status.card_id,
                 card_secret: status.card_secret,
               }, null, 2));
+              await chmod(CARD_FILE, 0o600);
               console.log(`Card ID saved to ${CARD_FILE}`);
             }
             // Clean up setup file

package/src/commands/wallet.ts

@@ -1,5 +1,5 @@
 import { Command } from "commander";
-import { readFile, writeFile, mkdir } from "node:fs/promises";
+import { readFile, writeFile, mkdir, chmod } from "node:fs/promises";
 import { homedir } from "node:os";
 import { join } from "node:path";
 
@@ -8,6 +8,7 @@ const WALLET_FILE = join(CONFIG_DIR, "wallet.json");
 
 async function ensureConfigDir(): Promise<void> {
   await mkdir(CONFIG_DIR, { recursive: true });
+  await chmod(CONFIG_DIR, 0o700);
 }
 
 interface WalletConfig {
@@ -61,8 +62,10 @@ export function registerWalletCommands(program: Command): void {
         };
 
         await writeFile(WALLET_FILE, JSON.stringify(config, null, 2));
+        await chmod(WALLET_FILE, 0o600);
 
         console.log(`Wallet created. Address: ${account.address} — Fund it with USDC on Base.`);
+        console.log(`Private key saved to ${WALLET_FILE} (owner-only permissions). Keep this file secure.`);
       } catch (err: unknown) {
         console.error(`Error: ${err instanceof Error ? err.message : err}`);
         process.exit(1);